CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-01-10
Microsoft Office Equation Editor Memory Corruption Remote Code Execution Vulnerability (CVE-2018-0798)
[Affected Scope] Equation Editor (EQNEDT32.EXE) component included in Microsoft Office 2007, 2010, 2013, and 2016
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by tricking them into opening a specially crafted Office document containing malicious OLE objects
[Mitigation] Apply official Microsoft security patches immediately, or disable the legacy Equation Editor component via registry modifications